CVEs published in August 2023
2,620 vulnerabilities, 342 critical, 13 exploited.
- froxlor, froxlor froxlor/froxlor +1 moreBusiness Logic Errors in froxlor/froxlor3.8 Low
- empoweridEmpowerID before 7.205.0.1 allows an attacker to bypass an MFA (multi factor authentication)...9.1 Critical
- veritas netbackup snapshot managerA vulnerability was discovered in Veritas NetBackup Snapshot Manager before 10.2.0.1 that allowed...9.8 Critical
- audiocodes 405hd firmware, 445hd firmware, c435hd firmware +4 more +6 moreAn issue was discovered in libac_des3.so on AudioCodes VoIP desk phones through 3.4.4.1000. Due...7.5 High
- audiocodes 405hd firmware, 445hd firmware, c435hd firmware +4 more +6 moreAn issue was discovered on AudioCodes VoIP desk phones through 3.4.4.1000. Due to the use of a...7.5 High
- audiocodes 405hd firmware, 445hd firmware, c450hd firmware +1 more +3 moreAn issue was discovered on AudioCodes VoIP desk phones through 3.4.4.1000. The validation of...7.8 High
- vimvim 8.2.2348 is affected by null pointer dereference, allows local attackers to cause a denial of...5.5 Medium
- pearadmin pear admin thinkSQL Injection in pear-admin-think version 2.1.2, allows attackers to execute arbitrary code and...8.8 High
- thoughtworks node-worker-threads-poolSUCHMOKUO node-worker-threads-pool denial of service Vulnerability6.5 Medium
- xnviewBuffer Overflow vulnerability in XNView before 2.50, allows local attackers to execute arbitrary...7.8 High
- ffmpegInteger overflow vulnerability in av_timecode_make_string in libavutil/timecode.c in FFmpeg...5.5 Medium
- xnviewBuffer Overflow vulnerability in XNView version 2.49.3, allows local attackers to execute...7.8 High
- ruoyiAn issue was discovered in getRememberedSerializedIdentity function in CookieRememberMeManager...9.8 Critical
- qtInteger Overflow vulnerability in qsvghandler.cpp in Qt qtsvg versions 5.15.1, 6.0.0, 6.0.2, and...5.5 Medium
- margox braft-editorMargox Braft-Editor Cross-site Scripting Vulnerability6.1 Medium
- open-falcon dashboardAn issue was discovered in open-falcon dashboard version 0.2.0, allows remote attackers to gain,...9.8 Critical
- hello.js project hello.jsMrSwitch hello.js vulnerable to prototype pollution9.8 Critical
- dgtl huemagicDirectory Traversal vulnerability in Foddy node-red-contrib-huemagic version 3.0.0, allows remote...7.5 High
- supermicro-cms project supermicro-cmsAn issue was discovered in pcmt superMicro-CMS version 3.11, allows authenticated attackers to...7.2 High
- supermicro-cms project supermicro-cmsAn issue was discovered in pcmt superMicro-CMS version 3.11, allows attackers to delete files via...4.9 Medium
- qpdf project qpdfAn issue was discovered in QPDF version 10.0.4, allows remote attackers to execute arbitrary code...5.3 Medium
- ffmpegAn issue was discovered in decode_frame in libavcodec/tiff.c in FFmpeg version 4.3, allows remote...7.5 High
- cskaza cszcmsSQL Injection vulnerability in cskaza cszcms version 1.2.9, allows attackers to gain sensitive...7.5 High
- bloofox bloofoxcmsFile Upload vulnerability in bloofoxCMS version 0.5.2.1, allows remote attackers to execute...9.8 Critical
- wuzhicmsAn issue was disocvered in wuzhicms version 4.1.0, allows remote attackers to execte arbitrary...8.8 High
- school faculty scheduling system project faculty scheduling systemSQL Injection vulnerability in oretnom23 School Faculty Scheduling System version 1.0, allows...9.8 Critical
- freedesktop popplerAn issue was discovered in freedesktop poppler version 20.12.1, allows remote attackers to cause...5.5 Medium
- freedesktop popplerAn issue was discovered in freedesktop poppler version 20.12.1, allows remote attackers to cause...6.5 Medium
- foxit pdf readerBuffer Overflow vulnerability in cFilenameInit parameter in browseForDoc function in Foxit...5.5 Medium
- faucet ryuFaucetSDN Ryu Denial of Service Vulnerability7.5 High
- faucet ryuFaucetSDN Ryu Denial of Service Vulnerability7.5 High
- churchcrmCross Site Scripting (XSS) vulnerability in ChurchCRM version 4.2.1, allows remote attckers to...5.4 Medium
- churchcrmCSV Injection vulnerability in ChurchCRM version 4.2.0, allows remote attackers to execute...8.8 High
- matthiaswandel jheadBuffer Overflow vulnerability in jpgfile.c in Matthias-Wandel jhead version 3.04, allows local...7.8 High
- kindsoft kindeditorCross Site Scripting (XSS) vulnerability in content1 parameter in demo.jsp in kindsoft kindeditor...6.1 Medium
- foldingathome client advanced controlAn issue was discovered in FoldingAtHome Client Advanced Control GUI before commit...9.8 Critical
- zrlogDirectory Traversal vulnerability in delete function in admin.api.TemplateController in ZrLog...9.1 Critical
- zohocorp manageengine password manager proCross Site Scripting (XSS) vulnerability in Query Report feature in Zoho ManageEngine Password...6.1 Medium
- thinkcmfThinkCMF Cross-site Scripting Vulnerability5.4 Medium
- thedaylightstudio fuel cmsWithdrawn Advisory: Daylight Studio FUEL-CMS SQLi Vulnerability8.8 High
- xuxueli xxl-jobxuxueli xxl-job Cross-Site Request Forgery Vulnerability8.8 High
- davesteele gnome-gmailAn issue was discovered in attach parameter in GNOME Gmail version 2.5.4, allows remote attackers...6.5 Medium
- lepton-cms leptoncmsCross Site Scripting (XSS) vulnerability in backend/pages/modify.php in Lepton-CMS version 4.7.0,...6.1 Medium
- cms-dev cmsPlaintext Password vulnerability in AddAdmin.py in cms-dev/cms v1.4.rc1, allows attackers to gain...6.5 Medium
- rockcarry ffjpegBuffer Overflow vulnerability in jfif_decode() function in rockcarry ffjpeg through version 1.0.0...7.8 High
- miniupnp project ngiflibAn issue was discovered in GetByte function in miniupnp ngiflib version 0.4, allows local...5.5 Medium
- jerryscriptAn issue was discovered in ecma-helpers.c in jerryscript version 2.3.0, allows local attackers to...5.5 Medium
- laborator kaliumCross Site Scripting (XSS) vulnerability in Name Input Field in Contact Us form in Laborator...6.1 Medium
- yzmcmsCross Site Request Forgery (CSRF) vulnerability in yzmcms version 5.6, allows remote attackers to...8.8 High
- gilacms gila cmsGila CMS Cross-site Scripting Vulnerability6.1 Medium
- Show moreLoading…